
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json)
Hash identifier: g6h+nvdmZTZVW+aXIRQXJJs4SKckVbV4C0qMKff1+tA=
Subject key identifier: A2:DB:5E:A9:59:73:43:A3:D7:6A:FE:47:46:90:BF:F2:CA:FC:C1:FD
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial: 47FAD84D8EBC4D3A33F293E2F88242C0D2CC0769
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
Manifest number: 56
Signing time: Tue 14 Jul 2026 10:16:03 +0000
Manifest this update: Tue 14 Jul 2026 10:11:02 +0000
Manifest next update: Wed 15 Jul 2026 12:54:02 +0000
Files and hashes: 1: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: Pw2A4NVNl7IyPU/0Pl9s5uwKbv+EKd6sniLO5n64o1c=)
2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=)
3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fa:d8:4d:8e:bc:4d:3a:33:f2:93:e2:f8:82:42:c0:d2:cc:07:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Validity
Not Before: Jul 14 10:11:02 2026 GMT
Not After : Jul 15 12:54:02 2026 GMT
Subject: CN=A2DB5EA9597343A3D76AFE474690BFF2CAFCC1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a0:e8:18:e4:d0:7e:54:34:20:97:07:ac:92:
33:3b:06:e2:0b:0b:92:0f:35:38:60:5d:a5:95:ff:
41:28:0f:3d:1f:0d:6e:fe:98:bc:2f:92:ba:b9:1d:
2f:90:3a:12:12:e7:b0:7a:d3:a5:e1:4a:82:67:c1:
15:10:a1:1f:3b:fa:69:8b:f8:f2:32:45:2b:b0:f4:
93:42:a7:1a:3d:5d:d8:58:79:ef:63:79:6b:cd:f7:
11:84:66:68:8d:1f:0c:ff:f3:44:f0:a5:9a:fd:7f:
e7:79:47:84:e3:94:87:a1:b8:5c:e6:87:ad:08:2b:
bd:d1:56:f6:1e:eb:e6:7a:b2:d6:f3:09:cf:3f:f4:
5f:41:dc:d6:cf:92:13:73:cb:9a:d7:e5:a4:e0:50:
16:de:3e:43:a9:0c:a2:a0:cb:57:bc:55:eb:34:91:
3f:ad:ae:da:0f:77:8e:3a:87:75:99:49:94:9e:41:
3c:41:98:7e:bd:44:6b:a9:79:11:61:ec:ab:59:02:
6e:70:b3:30:a5:93:32:a0:3c:26:9d:2b:3b:3e:88:
f1:46:a0:8b:af:31:43:dd:14:54:33:00:35:fe:7a:
57:40:0c:f3:d2:aa:28:17:fa:8e:cd:f6:ab:74:2e:
57:8a:97:8c:fc:fa:e7:6c:01:77:19:f5:34:87:3a:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:5E:A9:59:73:43:A3:D7:6A:FE:47:46:90:BF:F2:CA:FC:C1:FD
X509v3 Authority Key Identifier:
keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e7:89:77:dd:42:e9:56:cb:3e:88:47:6f:55:ef:99:d7:e3:
54:bb:82:12:9d:ef:1c:5a:a8:25:69:c3:27:a9:e8:b0:6c:bd:
47:05:f0:9e:51:58:4d:ac:95:e2:ac:49:b5:14:4d:5a:bb:14:
ea:b1:db:ef:91:e3:64:df:6f:25:f1:08:fe:d0:76:79:92:c4:
e8:22:28:05:d5:15:42:67:31:a4:38:d4:4d:5a:fe:5a:c0:67:
9f:1e:d9:75:40:dc:36:7a:d2:42:9e:e8:c4:e3:49:25:24:40:
cb:ae:4e:3e:55:f5:d6:1a:5c:d8:31:94:fd:99:37:46:ab:01:
36:cd:8d:5c:5b:2d:70:31:24:59:90:40:f3:af:24:78:08:05:
c1:4c:fb:8b:9f:62:5f:a1:e0:9a:d8:9f:4b:c3:60:55:eb:5c:
49:74:37:b4:22:ad:ae:54:39:ef:0a:e1:2d:b2:2f:ca:65:56:
5a:d0:4b:43:c5:fc:0c:dd:d8:fd:28:35:3d:88:85:86:bd:d6:
c7:13:4a:35:15:47:eb:32:13:d0:9c:94:bc:78:99:31:d2:37:
16:3c:33:7e:92:27:03:07:8b:91:fa:b7:9a:f3:9c:06:64:0a:
e6:c7:b3:00:34:13:ee:56:3d:2f:21:94:31:bc:46:d0:94:9d:
47:cd:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:05 2026 by rpki-client